🇬🇧 Development of the activity of the TA505 cybercriminal group
🇬🇧 Development of the activity of the TA505 cybercriminal group
محتويات التنبيه:
معلومات :
| المرجع | CERTFR-2020-CTI-009 |
| العنوان | 🇬🇧 Development of the activity of the TA505 cybercriminal group |
| تاريخ الاصدار الأول | 27 août 2020 |
| تاريخ أخر تحديث | 21 septembre 2020 |
| المصادر | |
| المرفقات | Aucune(s) |
المخاطر:
الأنظمة المثأثرة:
ملخص الثغرة:
الحلول من هده الثغرة:
The intrusion set TA505 has been active since at least 2014 when it initially stole financial information through the use of Dridex and mass distributed ransomwares. It evolved and now conducts phishing campaigns against a wide range of businesses. Its goal is now to resell the access it gained to the information system of its victims or to encrypt it entirely to ask for a ransom.
المصادر: